Lucene search
+L

3714 matches found

Vulnrichment
Vulnrichment
•added 2024/11/20 11:14 a.m.•15 views

CVE-2024-52441 WordPress Quick Learn plugin <= 1.0.1 - PHP Object Injection vulnerability

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Rajesh Thanoch Quick Learn quick-learn allows Object Injection.This issue affects Quick Learn: from n/a through = 1.0.1...

9.8CVSS8.6AI score0.00556EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2024/11/20 7:00 a.m.•9 views

Microsoft Launches Windows Resiliency Initiative to Boost Security and System Integrity

Microsoft has announced a new Windows Resiliency Initiative as a way to improve security and reliability, as well as ensure that system integrity is not compromised. The idea, the tech giant said, is to avoid incidents like that of CrowdStrike's earlier this July, enable more apps and users to be...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/11/20 12:00 a.m.•16 views

WordPress plugin Quick Learn 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

9.8CVSS8.1AI score0.00556EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/20 12:00 a.m.•43 views

CVE-2024-29292

Multiple OS Command Injection vulnerabilities affecting Kasda LinkSmart Router KW6512 = v1.3 enable an authenticated remote attacker to execute arbitrary OS commands via various cgi parameters...

0.01027EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/20 12:00 a.m.•65 views

CVE-2024-29292

The Kasda LinkSmart Router KW6512 (versions

9.1CVSS7.9AI score0.01027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/20 12:00 a.m.•7 views

CVE-2024-52441: Improperly Controlled Modification of Object Prototype Attributes

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Rajesh Thanoch Quick Learn quick-learn allows Object Injection.This issue affects Quick Learn: from n/a through = 1.0.1...

9.8CVSS5.8AI score0.00556EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/18 3:15 p.m.•23 views

CVE-2024-52429

Unrestricted Upload of File with Dangerous Type vulnerability in Anton Hoelstad WP Quick Setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through 2.0...

8.8CVSS7.3AI score0.00919EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/18 2:19 p.m.•335 views

CVE-2024-52429 WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through = 2.0...

9.9CVSS0.00919EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/18 2:19 p.m.•20 views

CVE-2024-52429 WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through = 2.0...

9.9CVSS7.2AI score0.00919EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/18 8:55 a.m.•16 views

WordPress Quick Learn plugin <= 1.0.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Quick Learn versions = 1.0.1...

9.8CVSS7.3AI score0.00556EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/18 12:00 a.m.•21 views

PT-2024-33075 · Quick Heal · Quick Heal Antivirus Pro

Name of the Vulnerable Software and Affected Versions: QuickHeal Antivirus Pro versions 24.1.0.182 and earlier Description: The issue is related to incorrect access control, allowing authenticated attackers with low-level privileges to arbitrarily modify antivirus settings. This flaw enables...

6.5CVSS7.1AI score0.00312EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/11/18 12:00 a.m.•9 views

PT-2024-33074

Name of the Vulnerable Software and Affected Versions QuickHeal Antivirus Pro version v24.0 Quick Heal Total Security version v24.0 Description An issue in the wssrvc.exe service allows authenticated attackers to escalate privileges. Recommendations For QuickHeal Antivirus Pro version v24.0,...

8.8CVSS5.7AI score0.00383EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•14 views

WordPress plugin WP Quick Setup 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.9CVSS8.4AI score0.00919EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•6 views

CVE-2024-48292: Incorrect Default Permissions

An issue in the wssrvc.exe service of QuickHeal Antivirus Pro Version v24.0 and Quick Heal Total Security v24.0 allows authenticated attackers to escalate privileges...

8.8CVSS5.8AI score0.00383EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•17 views

Quick Heal Antivirus Pro和Quick Heal Total Security 安全漏洞

Quick Heal Antivirus Pro and Quick Heal Total Security are both antivirus software from Quick Heal India. A security vulnerability exists in Quick Heal Antivirus Pro version v24.0 and Quick Heal Total Security version v24.0, which stems from a vulnerability that allows an authenticated attacker t...

8.8CVSS6.7AI score0.00383EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/11/18 12:00 a.m.•23 views

WordPress Quick Learn Plugin <= 1.0.1 is vulnerable to PHP Object Injection

Software Quick Learn Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52441 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 09d3039a1cf9 Credits LVT-tholv2k Required privilege Unauthenticated...

9.8CVSS6.9AI score0.00556EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•8 views

CVE-2024-52429: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through = 2.0...

9.9CVSS5.8AI score0.00919EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/15 8:32 a.m.•18 views

WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability

Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Quick Setup versions = 2.0...

9.9CVSS7.5AI score0.00919EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/15 12:00 a.m.•28 views

WordPress WP Quick Setup Plugin <= 2.0 is vulnerable to Arbitrary File Upload

Software WP Quick Setup Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52429 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID ceb3ca8b7fc9 Credits Mika Required privilege Subscriber Published...

9.9CVSS7.2AI score0.00919EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2024/11/15 12:00 a.m.•24 views

Intel QAT Engine for OpenSSL software Control Flow Management Insufficiency Vulnerability

The Intel QAT Engine for OpenSSL software is an open source software plug-in designed to accelerate OpenSSL cryptographic operations with Intel Quick Assist Technology QAT hardware. A control flow management deficiency vulnerability exists in Intel QAT Engine for OpenSSL software, which can be...

8.2CVSS6.7AI score0.00455EPSS
SaveExploits0References1
Rows per page
Query Builder